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Passive to Active Operations 



AfiTESESS 


£r- Primary Goalt:To en^tecsmfntitaBK^eesstcko 
target networks via off-net opabilities. 

ie Prerequisite: We need to fermlJ the netwonlk 
of inttenssEtt in ondterttotteigiet itt. 

isr- Procedure:: Conduct passive surrey to 
locale netuKsrtk, then perform active op. 

ie So I ut bon: Utilise BLINDOA1TE aBirat tthe 
appropriate plugHm solutaboi1$$). 
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GLQSlEV 

Passive to Active Operations AfirGasss 

^■ 

^ Successful operatwam of BLINDDATE is 
essentiiaBlI to comedt usage of pHuigphros. 

^ Two types cuff plug-ins exist: 

AiisdI^gsss Tooll Aids 
>- Actfwee CNE Toolte 

^ We will ftacus orn Active GMETljodris: 

>► NIGHTSTAND 
^ HAPPYHOUR 
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Active CNE Assessnnnaaitt 


GlQSIe 
akcesess 


^ BLINDDATE used as ttrattti a swnwa^y and 
vuhnBBrtlDiityy analysis tool I for 8BQQ2.1111 
netwontts. 

^ Operator needs to know wllnat 
vulmBisriJblilties, or oiteiag, ft© look for inn order 
to utilize tffne correct Active OUETanril ((if any) 

^ We wil focus primarily on cnitteraa 
necessary to carqy out IFUIQHIIISIMI]D((^) 
and BAOOECISIOIM (BDfff)) ®qo®isltixw3S. 
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Major Assaarommtt Griiteniia 


CHOSE e 
akcesess 


Clients 

5^ A client is a pa^BSfpBftne: If no dI rants aiQBaom 
the ttengpdt rnettwokk, tttweSss imntMggttojikyyfet. 

^ Security 

5-^ Encrjptl bojn setting (Open, WEP, WPA, WPA2) 
dictates wthibjti capEtibiffityty can be uitesti (iff asn^). 

^ Signal Strength 

5^ SNR dictates wtettter we tcaEmfpBshforrnaa 
sucxteee&ilj I acttw® CNE operation!. 
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Active CNE ©Operations 


©lQSSe 

AfiTESESS 



^ What doestttelt do ®Gatit$? 

5^ Forces the targptt to ©over% cornttBodtl a 

FOXACID senwr. 

^ What is IRDDGftCUD sifljpsse tooth?? 

Perfomm vuhnaisrthlitity analyses and ©jfjMriffitetion 

of Wnstta^t (ifffp®s4itel)e). 
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Redimdtikm to FOXAQDD 


GlQSSe 
akcesess 


^ A FOXACID Tag is a spaced I URL pdiirrtrrag 
to a parttimlriiar FOXACID Server. 

^ Contactfrrcg Una FA Server will (hopefully) 
result in the ©rnitfanttor being oqdtofiteld. 

^ We want ttoettoiogpat t© be exploited. 

How do w® irartlrBsxfct ttlnasttar^et ttotttie 

FOXACID Server wiittmilt being noticed. 

>- Use NIGHTSTAINID) oor BMEEDEBffiNJ 
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